Overview of Job Function:

As Sr. Cloud Security Engineer, you will be responsible for the security of our cloud-based systems, applications, and data. You will work with our engineering and operations teams to design and implement security controls and processes that protect our data and meet compliance requirements. You will also be responsible for investigating and responding to security incidents. The ideal candidate will have experience with cloud security, application security, network security, and security compliance.

Principal Duties and Essential Responsibilities:

• 7+ years in information security, with at least 5 years of cloud security related responsibilities
• Knowledge of and experience with cloud security services and engineering, including public, private, and hybrid models
• Experience with cloud services and ability to identify the pitfalls and potential security problems with traditional cloud deployments
• Acts as the senior technical representative for cloud security while engaging with other senior technical leaders throughout the organization in designing and implementing cloud solutions.
• Set technical standards for Cloud infrastructure, containers, security baselines, policies, and procedures
• Develop and implement security controls for various cloud infrastructure providers
• Analyze security configurations and provide vulnerability assessments
• Analyze cloud network security including routing, peering, TGWs, CloudWAN for insecure configurations
• Conduct in-depth security reviews of, new product and cloud solutions, providing security guidance on cloud design, networking, data classification, data storage design.
• Provide security expertise on system, networking, encryption and authentication
• Provides assistance to SOC and automation teams
• Support the regulatory compliance initiatives, processes, and documentation for ISO, NIST, CSA, PCI, SOC2, etc.
• Collaborate with the cybersecurity SOC & automation team members to identify areas for automation and develop solutions to automate security tasks and workflows.
• Participate on automation of incident prioritization, false positives identification, correlation, vulnerability remediation

Minimum Requirements:

• B.E (Computer Science/Engineering) or equivalent experience and/or one of the following: 
  • AWS certification(s): Solutions Architect Professional or Security certification.
• Minimum of 5 years of experience in cybersecurity and security/cloud automation.
• Strong experience with AWS networking
• Strong experience with AWS and using automation to perform actions spanning multiple accounts.
• Strong experience with Kubernetes, Helm, Istio, Docker
• Proficient in a scripting language such as Python, PowerShell, and Bash.
• Experience with Terraform, Jenkins, Git
• Distributed systems and cloud services experience is desirable, experience with fuzzing frameworks and exploitation frameworks (such as Metasploit, etc.) is preferred
• Experience with Windows and Linux based applications.
• Excellent analytical and problem-solving skills.
• Strong communication and collaboration skills.

Preferred Skills:

• Experience with Azure, GCP and hybrid infrastructure
• Experience with DLP, CASB, Zero-Trust, and SOAR
• Experience with security testing tools and workflows, such as SAST, DAST, and SCA.
• Familiarity with container policy management and enforcement
• Experience with authentication protocols (i.e., SAML, WS-FED, OIDC / OAuth 2.0)